Locked out of paid account after phishing attack
-
Hello,
I have been completely locked out of my WordPress.com account since June 5th, following a phishing attack targeting my blog’s email address.
When I log in via Gmail, I am automatically redirected to a new, empty profile with a different username. My actual blog, my WordPress.com Personal subscription, my domain, and all payment history are missing from this dashboard — they belong to my original primary account.
I have already submitted full proof of ownership (invoice and receipt) through my support ticket, which has been open for 5 days with no resolution.
Open ticket: #11305010
I am kindly requesting that a Happiness Engineer either merge the two profiles or restore admin access to my original account. I am currently unable to access a service I am actively paying for.
I would also like to note that this blog is of an academic nature — it supports my ongoing research and studies. Every day without access means falling behind on important work.
Thank you very much for your time.
-
You created the account kallianiaou3e75b5b9cf yourself only 5 days ago on Jun 4, 2026. As the email address is the unique identifier on the wordpress.com platform, your other wordpress.com account must have another email address.
What is the URL of your site?
-
The URL of my site is https://animadebarro.com. My original account is linked to (email visible only to moderators and staff). Five days ago I received a password reset email on my blog address and clicked the link, which is when the second empty account kallianiaou3e75b5b9cf was created. I did not create this account intentionally. The password reset email was sent to my blog address (email visible only to moderators and staff), which is a separate email I use only for blog correspondence, not for WordPress login. Could you please check which account owns animadebarro.com and restore my access to it?
-
-
-
Dear Kallianthi,
Thank you for following up and providing these critical details. I completely understand how stressful this situation is, especially with your active academic research and paid subscription tied to animadebarro.com.
For strict security and privacy reasons, our support team cannot manually merge these accounts or change login credentials over email. To safely verify your ownership and return access to you, you must fill out our official Account Recovery Form.
Our specialized Account Recovery team will use the details you submit through this form to review your information and securely guide you through regaining access.
Once submitted, our Account Recovery team will review the data and contact you directly via email with the next steps.
Thank you for your cooperation and patience as we work to secure your primary account!
-
I am not sure if you have received my Account Recovery Form because when I pushed the button ‘Recover my account’, the following message just popped up. Could you please verify that you have received my recovery form?
-
Dear Kallianthi,
Thank you for providing the screenshot. I completely understand why that message would be confusing when you are trying to submit an account recovery request.
The notification you encountered is an automated safety check from our system. Because you mentioned that you still have access to your primary email address (
(email visible only to moderators and staff)), the system is prompting you to use the standard lost password form first rather than processing a manual recovery ticket.To help our Account Recovery team verify your submission, please follow these precise steps:
- Log completely out of this new, temporary account (
kallianiaou3e75b5b9cf). - Go to the Lost Password Form.
- Enter your original primary email address: (email visible only to moderators and staff) (do not use your blog’s contact email).
- Check your Gmail inbox (and your spam folder) for the password reset link.
If you do not receive the email, or if it redirects you back to an empty account again: Please use a completely different, secondary email address (one not associated with either of these two accounts) to fill out the Account Recovery Form. This ensures your request bypasses the automated filter, hits our specialized queue, and gives us a safe, uncompromised way to contact you and guide you through regaining full admin access to
animadebarro.com.We appreciate your patience while we work with you to secure your research and account!
- Log completely out of this new, temporary account (
-
I did it and it redirected me back to the empty account kallianiaou3e75b5b9cf. So I filled out the Account Recovery Form using a secondary email address.
Thank you for your help!!!
-
Dear Kallianthi,
Thank you for confirming that you have submitted the Account Recovery Form using your secondary email address.
I want to assure you that our specialized Account Recovery team has received your submission. Because this request was sent from an unassociated email address, it successfully bypassed the automated filters and is now in our secure queue for manual verification.
Our team is currently reviewing the details and proof of ownership you provided to ensure we can safely restore your admin access to animadebarro.com without compromising your data. We completely understand how vital this blog is for your ongoing academic research and studies, and we are treating this with the appropriate urgency.
An Account Recovery specialist will reach out to you directly at your secondary email address as soon as the review is complete or if any additional verification is required.
Thank you again for your patience, cooperation, and vigilance throughout this process.
WordPress.com Forums 